Qualys has expanded its global Managed Risk Operations Centre (mROC) Alliance, adding technology alliance partners spanning mobile security, operational technology (OT) and internet of things (IoT), and identity. The company said the expansion is intended to feed partner telemetry into Qualys Enterprise TruRisk Management (ETM) to provide organisations with a consolidated view of cyber risk across areas that are often assessed in separate tools.
The newly named technology alliance partners include Claroty, Lookout, NowSecure, Nozomi Networks and Okta. Qualys said data from these vendors would be incorporated into ETM, where its TruRisk scoring and prioritisation engine evaluates it alongside other enterprise risk data to produce a unified score and remediation priorities for security teams.
In its announcement, Qualys pointed to an increasing mismatch between the pace of vulnerability discovery—accelerated by “frontier AI models”—and organisations’ capacity to triage and remediate exposures. It also argued that some fast-growing segments of the attack surface, including mobile devices, connected devices, industrial and medical systems, and identities, are difficult to measure with traditional approaches such as agent-based tools or active scanning.
Qualys outlined how it expects the partner integrations to extend coverage across three areas. Mobile integrations with Lookout and NowSecure are described as providing visibility into device posture, OS vulnerabilities and application-level risks. OT and IoT telemetry from Claroty and Nozomi Networks is described as enabling passive asset discovery and vulnerability data for systems such as industrial control systems, medical devices and building management systems. Identity telemetry from Okta is described as bringing in indicators such as misconfigured, over-privileged or exposed accounts and credentials.
The company also announced two new partner authorisation tracks: Authorised mROC Advisor and Authorised mROC Delivery & Implementation Partner. Qualys said the additional roles are designed to help customers establish a Risk Operations Centre operating model, deploy ETM, integrate third-party findings and technology alliance telemetry, and implement ROC workflows. Existing “mROC Partner” certification remains positioned around operating a customer’s ROC as a managed service on ETM.
“PHP2Shell was a wake-up call for the industry. The vulnerability existed for years, but AI dramatically changed the economics of discovery and exploitation, enabling adversaries to weaponise exposures at a speed that far exceeds traditional response cycles,” said Cade Stephens, vice president of global channels and strategic alliances at Qualys. “Our expanded Global mROC Alliance brings together the power of the Qualys platform, strategic technology alliance partners, and a global ecosystem of highly trained Risk Operations Centre experts to help customers operationalise cyber risk management at scale and outpace threats in the age of AI.”
